- Describe the bug. Describe what is happening when the bug occurs. Describe what you would normally expect to occur.
The email sent for purchase confirmations after buying Builder’s Club / Robux is not encrypted.
-
How often does the bug happen (Everytime/sometimes/rarely)?
-
Would a screenshot or video help describe it to someone? If so, post one.
-
When did the bug start happening? If we can tie it to a specific release that helps us figure out what we broke.
The earliest email I have in my inbox is from Oct. 11th, 2017 - it is not encrypted. -
Anything else that you would want to know about the bug if it were your job to find and fix it.
I would fix this because the email contains sensitive information:
the cardholder’s full name,
the last four digits of the credit/debit card,
the purchase id.
Other company transaction confirmation emails are using standard encryption, like Steam and Amazon.